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APPEAL BRIEF 



I. REAL PARTY IN INTEREST 

The above-identified application is assigned, in its entirety, to Philips 
Electronics North America. 



II. RELATED APPEALS AND INTERFERENCES 

Appellant is not aware of any co-pending appeal or interference which will 
directly affect or be directly affected by or have any bearing on the Board's decision 
in the pending appeal. 

III. STATUS OF CLAIMS 

Claims 1-14 are pending in the application. 

Claims 6-10 are allowed; claim 3 is allowable if rewritten in independent form. 
Claims 1-2, 4-5, and 11-14 stand rejected by the Examiner under 35 U.S.C. 
102(b). 

These rejected claims are the subject of this appeal. 

IV. STATUS OF AMENDMENTS 

No amendments were filed subsequent to the final rejection in the Office 
Action dated 21 April 2005. A reply to the final rejection was filed on 5 June 2005. 

V. SUMMARY OF CLAIMED SUBJECT MATTER 

The invention relates to a check-out/check-in system that provides a "one-at- 
a-time M or an "at-most-isi-at-a-time" copy scheme to limit the number of 
simultaneously available copies of protected content material (page 2, lines 5-7). 
Such a system is used, for example, to limit the number of copies of material 
concurrently provided to portable devices, such as MP3 players. When a 'conforming' 
receiving device receives a copy of the material (check-out), the system increments a 
tally; when the copy of the material is removed from the receiving device (check-in), 
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the system decrements the tally. The check-out/check-in system of this invention 
assures that the device that "checks-in" a copy of content material is the same device 
that "checked-ouf the copy, using a secure challenge-response protocol (page 2, 
line 29 through page 3, line 6). Preferably, the 'challenge 1 is a random number that is 
encrypted by the check-out/check-in system, using a public key of a public-private 
key pair that is associated with the receiving device (page 5, lines 11-13); the 
'response 1 from the receiving device is a decryption of the random number, using the 
private key that is secret to the receiving device (page 6. lines 5-8). Other security 
challenge-response techniques may also be used (page 5, lines 10-11). 

As claimed in independent claim 1, upon which claims 2-5 depend, the 
invention comprises a method that includes communicating a copy of the content 
material to a receiving device (page 5, lines 1-2), communicating a security challenge 
to the receiving device when the copy of the content material is communicated to the 
receiving device (page 5, lines 8-11; 350 in FIG. 2), and receiving a security 
response, based on the security challenge, from the receiving device when the copy 
of the content material is removed from the receiving device (page 6, lines 1*5; 370 in 
FIG. 2). 

As claimed in independent claim 11, upon which claims 12-14 depend, the 
invention comprises a receiving device (200) that includes a memory (210) that is 
configured to store the content material and the corresponding security challenge 
(page 5, lines 17-18), and a security device (220) that is configured to erase the 
content material from the memory (page 6, lines 1-3), and communicate a security 
response to a check-out/check-in device (100), based on the security challenge that 
is associated with the content material (page 6, lines 3-5). 

As claimed in dependent claim 13, upon which claim 14 depends, the security 
device (220) includes a decrypter (230) that decrypts the security challenge via a 
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private key (212) of a public-private key pair that is associated with the receiving 
device to form the security response (page 6, lines 5-8). 

VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

Claims 1-2, 4-5, and 11-14 stand rejected under 35 U.S.C. 102(b) over 
Ananda <USP 5,638,513). 

VII. ARGUMENT 

Claims 1-2, 4-5, and 11-14 stand rejected 
under 35 U.S.C. 102(b) over Ananda 

Claims 1-2 and 4-5 

As claimed in independent claim 1, the claimed method includes 
communicating a security challenge to a receiving device when the copy of the 
content material is communicated to the receiving device, and receiving a security 
response, based on the security challenge, from the receiving device when the copy 
of the content material is removed from the receiving device. 

Ananda teaches a software rental system that provides access to the rented 
software by a first computer only when a communication fink is maintained between 
the first computer and a second, controlling computer (Ananda's abstract, lines 1-5). 
When the communication link is interrupted or terminated, the rented software no 
longer executes on the first computer (Ananda's abstract, lines 12-15), The rented 
software is downloaded to the first computer, with a header that includes a security 
program that is launched when the rented software is executed (Ananda, column 3, 
line 65 through column 4, line 6). The security program runs asynchronously while 
the rented software is running, and periodically verifies that the first computer is in 
communication with the central rental facility (Ananda, column 4, lines 12-20). When 
a communication failure is detected, the security program terminates the execution of 
the rented program (1016-1018 of FIG. 10A; column 16, lines 37-45). 



PHA 23,671 Appeal Brief 5.421 Atty. Docket No. PHA 23,671 

PAGE 4/12 * RCVD AT 9/2/2005 1 :37:01 PM [Eastern Daylight Time] ' SVR:USPTO-EFXRf -6126 * DN1S:2738300 * CSID:21 52437525 * DURATION (mm-ss) :03-36 



SEP-02-E005 IE: 36 FROM : ROBERT M. MCDERMOTT 3152437525 



TO:USPTO 



Appl. No. 09/548,728 Page 5 of 1 1 

Appeal Brief in Response 

to final Office action of 21 April 2005 

Ananda does not teach receiving a security response, based on a security 
challenge, from the receiving device when the copy of the content material is 
removed from the receiving device. 

The Office action notes that the applicant has defined 'removal' of the content 
material to include terminating access to the material; the applicant concurs with this 
definition of 'removal'. Using this definition, the Office action asserts that Ananda's 
termination of access to the rented software constitutes removal of the rented 
software. The applicant notes, however, that when Ananda terminates access, 
Ananda merely informs the user that access has been terminated. 

The Office action asserts that Ananda teaches a security response based on a 
security challenge at column 9, line 66 through column 10, line 10. However, this 
passage recites that the security manager on the user's computer verifies 
communication with the rental agency. Ananda is silent with regard to a challenge- 
response protocol. As the terms 'challenge' and 'response 1 are conventionally used, 
the computer that is performing the verification issues the 'challenge', and performs 
the verification based on a received 'response*. Thus, the applicant respectfully 
maintains that Ananda's user computer communicates the security 'challenge 1 and 
does not communicate the security 'response', as the term security response is 
conventionally used, and as defined and used in the applicant's specification. 
Further, Ananda specifically teaches that the security program on the user's 
computer issues a transfer time request to the rental facility, then waits up to 30 
seconds for a response; if the response is not received after 30 seconds, the security . 
program concludes that communications have ceased, and terminates the rented 
software (Ananda, column 16, lines 27-40). The applicant respectfully maintains that 
the transmission of a request and taking action based on an improper response or 
the lack of response corresponds to a conventional definition of a challenge (request) 
- response protocol, with Ananda's security program on the user's computer 
corresponding to the issuer of the challenge. With specific regard to daim 1, the 
receiving device is the device that receives the content material, i.e. Ananda's user's 
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computer; Ananda does not teach receiving a secure response from the user's 
computer based on a security challenge that is transmitted to the user's computer. 

Further, assuming in argument that Ananda's user's computer can be 
considered the transmitter of a security response, the applicant notes that it is the 
absence of communication between the user's computer and the rental facility for at 
least 30 seconds that causes the termination of access to the rented software, and 
thus a security response cannot be received from the user's computer when this 
access is terminated, because this is when there are no communications between 
the user's computer and the rental facility. 

MPEP 2131 clearly states: 

"A claim is anticipated only if each and every element as set forth in the claim is 
found, either expressly or inherently described, in a single prior art reference." 
Verdegaal Bros. v. Union Oil Co. of California. 814 F.2d 628, 631, 2 USPQ2d 1051, 
1053 (Fed. Cir. 1987). "The identical invention must be shown in as complete detail 
as is contained in the ... claim/' Richardson v. Si&uki Motor Co, 9 868 F,2d 1226, 
1236, 9 USPQ2d 1913, 1920 (Fed. Cir. 1989). 

Because Ananda fails to teach each of the elements of claim 1, upon which 

claims 2-5 depend, the applicant respectfully maintains that the rejection of claims 1- 

2 and 4-5 under 35 U.S.C. 102(b) over Ananda is unfounded, per MPEP 2131, 

Claims 11-14 

As claimed in independent claim 1 1 the invention comprises a receiving device 
that includes a memory that i$ configured to store content material and a 
corresponding security challenge, and a security device that is configured to erase 
the content material from the memory, and communicate a security response to a 
check-out/check-in device, based on the security challenge that is associated with 
the content material. 

The Office action asserts that Ananda teaches a receiving device that receives 
and stores content material and a corresponding security challenge, but fails to 
support this assertion. As noted above, Ananda is silent with regard to the terms 
"security challenge' and 'security response', and a conventional interpretation of 
Ananda's teachings does not support a conclusion that Ananda's receiving device 

PHA 23,671 Appeal Brief 5.421 Atty. Docket No. PHA 23,671 



PAGE 6/12 * RCVD AT 9f2/2005 1:37:01 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/26 * DNIS:2738300 < CSID:21 52437525 » DURATION (mm-ss):03-36 



SEP-02-2005 12:36 FROM : ROBERT M. MCDERMOTT £152437585 



TO:USPTO 



P. 7'12 



App!. No, 09/548,728 Page 7 of 1 1 

Appeal Brief in Response 

to final Office action of 21 April 2005 

receives a security challenge associated with the content material, or that Ananda's 
receiving device stores such a challenge. 

The Office action also asserts that Ananda teaches that the receiving device 
erases the content material and communicates a security response based on the 
security challenge. The applicant maintains that Ananda does not teach receiving a 
security challenge associated with the content material, and thus cannot be said to 
teach communicating a security response based on such a challenge. 

Because Ananda fails to teach each of the elements of claim 1 1 , upon which 
claims 12-14 depend, the applicant respectfully maintains that the rejection of claims 
11-14 under 35 U.S,C. 102(b) over Ananda is unfounded, per MPEP 2131, cited 
above. 

Claims 13-14 

Claim 13, upon which claim 14 depends, claims the receiving device of claim 
1 1 , wherein the security device includes a decrypter that decrypts the security 
challenge to form the security response that is communicated to a check-in/check-out 
device. 

Ananda's decryptor decrypts a password that is received from the rental 
facility, and compares it to a password stored in its memory to determine whether to 
allow continued access to the rented software (column 15, lines 35-45). The applicant 
respectfully maintains that this password is a security response, and not a security 
challenge. 

Assuming in argument that Ananda's password message from the rental 
facility can be said to correspond to the applicant's claimed security challenge, 
Ananda*s decryptor does not form a security response that is transmitted to the 
check-in/check-out device (rental facility), as specifically claimed in claim 13. 

Because Ananda fails to teach each of the elements of claim 13, upon which 
claim 14 depends, the applicant respectfully maintains that the rejection of claims 13 
and 14 under 35 U.S.C. 102(b) over Ananda is unfounded, per MPEP 2131, cited 
above. 
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CONCLUSIONS 



Because Ananda does not teach communicating a security challenge to a 
receiving device when the copy of the content material is communicated to the 
receiving device, and receiving a security response, based on the security challenge, 
from the receiving device when the copy of the content material is removed from the 
receiving device, as specifically claimed in claim 1, the applicant respectfully requests 
that the Examiner's rejection of claims 1-5 under 35 U,S,C. 102(b) be reversed by the 
Board, and the claims be allowed to pass to issue. 

Because Ananda does not teach a receiving device that includes a memory 
that is configured to store content material and a corresponding security challenge, 
and does not teach a security device that is configured to erase the content material 
from the memory, and communicate a security response based on the security 
challenge that is associated with the content material, as specifically claimed in claim 
1 1 , the applicant respectfully requests that the Examiners rejection of claims 11-14 
under 35 U.S.C. 102(b) be reversed by the Board, and the claims be allowed to pass 
to issue. 

Because Ananda does not teach a decrypter that decrypts a security 
challenge to form a security response that is communicated to a check-in/check-out 
device, as specifically claimed in claim 13, the applicant respectfully requests that the 
Examiner's rejection of claims 13-14 under 35 U.S.C, 102(b) be reversed by the 
Board, and the claims be allowed to pass to issue. 



Respectfully submitted. 




Robert M. McDermott, Attorney 
Registration Number 41 ,508 
804-493-0707 
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CLAIMS APPENDIX 

1. A method for limiting simultaneous copies of content material, comprising: 

communicating a copy of the content material to a receiving device, 
communicating a security challenge to the receiving device when the copy of 

the content material is communicated to the receiving device, and 

receiving a security response, based on the security challenge, from the 

receiving device when the copy of the content material is removed from the receiving 

device. 

2. The method of claim 1 , further including 

verifying a certification of the receiving device before communicating the copy 
of the content material to the receiving device. 

3. (Allowable) 

4. The method of claim 1, further including: 

generating a random number, and 

encrypting the random number via a public key of a public-private key pair that 
is associated with the receiving device to form the security challenge, and 
wherein 

the security response includes the random number. 

5. The method of claim 4, further including 

verifying a certification of the receiving device before communicating the copy 
of the content material to the receiving device, and 
wherein 

the certification of the receiving device includes a public key of the public- 
private key pair of the receiving device, 

6-10 (Allowed) 
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11. A receiving device that receives content material and a corresponding security 
challenge from a check-out/check-in device, comprising: 

a memory that is configured to store the content material and the 
corresponding security challenge, and 

a security device that is configured to: 

erase the content material from the memory, and 
communicate a security response to the check-out/check-in device, 
based on the security challenge that is associated with the content material. 

12. The receiving device of claim 11, wherein 

the security device is further configured to communicate a certification of the 
receiving device to the check-out/check-in device to enable the check-out/check-in 
device to provide the content material to the receiving device. 

13. The receiving device of claim 11, wherein 

the security device includes: 

a decrypter that decrypts the security challenge via a private key of a 
public-private key pair that is associated with the receiving device to form the security 
response. 

14. The receiving device of claim 13, wherein 

the security device is further configured to communicate a certification of the 
receiving device to the check-out/check-in device to enable the check-out/check-in 
device to provide the content material to the receiving device, and 

the certification of the receiving device includes a public key of the public- 
private key pair of the receiving device. 
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EVIDENCE APPENDIX 

No evidence has been submitted that is relied upon by the appellant In this 
appeal. 

RELATED PROCEEDINGS APPENDIX 

Appellant is not aware of any co-pending appeal or interference which will 
directly affect or be directly affected by or have any bearing on the Board's decision 
in the pending appeal. 
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